this post was submitted on 28 Oct 2024
136 points (100.0% liked)

Cybersecurity

8878 readers
5 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
 

Static credentials with passwords written into a firewall's code. What could go wrong?

you are viewing a single comment's thread
view the rest of the comments
[–] jmcs@discuss.tchncs.de 12 points 1 year ago (3 children)

You are right:

The second is using SSH, which is enabled by default on the management interface of the device. SSH can also be enabled on data interfaces.

Holy fuck.

[–] horse_battery_staple@lemmy.world 5 points 1 year ago* (last edited 1 year ago)

Yup, that's Cisco alright

[–] borari@lemmy.dbzer0.com 2 points 1 year ago (1 children)

You are right:

You should have gone with “correct”.

[–] horse_battery_staple@lemmy.world 5 points 1 year ago* (last edited 1 year ago) (1 children)

~~Is that needed or useful criticism?~~

HA! I totally missed the joke. Well played.

[–] Hawke@lemmy.world 5 points 1 year ago (1 children)

I think it’s more a reference to your username than actual criticism.

[–] borari@lemmy.dbzer0.com 5 points 1 year ago (1 children)

Yeah, I thought that would land better.

[–] horse_battery_staple@lemmy.world 3 points 1 year ago (1 children)

Oh GEEZ! Sorry, I had a VERY literal day at work today. Completely flew over my head.

[–] borari@lemmy.dbzer0.com 2 points 1 year ago

It’s all good. I’ve been having some of those days for what feels like the past month or two now. Hope work chills out for you!

[–] ryannathans@aussie.zone 2 points 1 year ago (1 children)

Management interface is only available locally

[–] curbstickle@lemmy.dbzer0.com 5 points 1 year ago (1 children)

The management interface can 100% be put on LAN and often is.

[–] ryannathans@aussie.zone 1 points 1 year ago* (last edited 1 year ago) (1 children)

Okay sure then you're asking for trouble. You could also configure the word password as your password.

[–] curbstickle@lemmy.dbzer0.com 1 points 1 year ago

I agree, its not something I would do.

Doesn't change that it happens.